“State-Recovery Attacks on Modified Ketje Jr” (2018) IACR Transactions on Symmetric Cryptology, 2018(1), pp. 29–56. doi:10.13154/tosc.v2018.i1.29-56.